$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS144632.roa File: AS144632.roa (raw, json) Hash identifier: 3nvevZwM18OCeMbw4pdrgYF9Bi2HWreTO3nDOnpRZU0= Subject key identifier: 50:24:37:0B:70:A7:0F:CB:68:CA:61:23:A8:82:BA:FA:24:B0:7C:3B Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 0D4CD01D1EAE6688EE4B7F20E4EAAFA4B89FFA93 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS144632.roa Signing time: Wed 04 Mar 2026 06:22:07 +0000 ROA not before: Wed 04 Mar 2026 06:17:07 +0000 ROA not after: Wed 03 Mar 2027 06:22:07 +0000 asID: 144632 IP address blocks: 240a:a7be::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:4c:d0:1d:1e:ae:66:88:ee:4b:7f:20:e4:ea:af:a4:b8:9f:fa:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:17:07 2026 GMT Not After : Mar 3 06:22:07 2027 GMT Subject: CN=5024370B70A70FCB68CA6123A882BAFA24B07C3B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:8a:de:f7:57:b2:f8:4b:bf:15:b2:4d:74:2d: 95:67:a8:a1:63:77:ab:a5:cd:f6:fb:11:1e:1a:5f: e3:5f:e1:ba:7e:69:6f:e8:be:53:2f:2a:ce:98:28: 6c:3f:05:3c:a5:7f:70:62:6c:20:52:28:35:b0:7f: 8f:82:c0:ab:a6:a5:f2:f8:61:27:89:3c:ec:ee:25: b6:46:c1:cf:9b:13:00:7e:8d:8b:90:cd:3b:20:b0: de:10:16:7f:4f:2b:1a:95:cf:03:60:81:3e:71:67: 8a:c0:b4:a8:7c:a3:5f:81:2b:e8:53:ae:b6:ff:71: ff:e1:86:e3:68:53:1a:68:5c:89:38:d3:8d:81:51: 2f:f4:67:24:99:61:54:34:90:58:6e:3a:01:77:cf: 65:24:43:61:04:98:ec:aa:cf:5a:01:c6:aa:d3:a6: 7b:08:95:6d:c6:39:c2:14:f3:b1:be:0c:0c:65:df: 57:38:d2:28:b5:fe:40:6a:db:07:43:94:33:8b:b5: b6:7e:81:e2:d4:15:cb:09:ac:32:ce:72:b3:a2:8c: 48:fb:a6:d6:51:c9:6b:9d:c3:e7:8c:73:1f:df:9b: 29:7d:8a:6a:d9:b2:ec:4c:d7:0c:5a:c2:7b:b4:04: bd:5e:fa:fe:19:b0:45:b4:5c:22:9e:f3:08:26:27: 50:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:24:37:0B:70:A7:0F:CB:68:CA:61:23:A8:82:BA:FA:24:B0:7C:3B X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS144632.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a7be::/32 Signature Algorithm: sha256WithRSAEncryption 04:1c:fa:2b:e2:4b:4b:d9:06:64:5e:92:12:52:47:0b:86:ae: 55:e6:2c:8e:c7:71:fa:8e:1b:38:40:18:5f:fd:7f:9d:34:af: ee:19:d0:cc:2d:c0:89:db:f6:74:ea:68:53:03:b1:92:cd:e9: 6a:07:74:8b:b0:76:8a:a2:c3:8c:71:bb:f5:7a:f3:1a:f1:66: b2:9a:89:e2:6f:d5:91:8c:35:63:e7:dc:a0:06:9f:a2:f7:18: 36:4c:29:9c:25:7f:d3:73:a3:4a:3c:f0:0b:98:0a:41:e6:78: cf:1a:9c:46:88:14:b2:b4:d0:8f:5d:f4:3e:2d:d9:e1:3e:3d: 72:62:1c:4e:e2:e2:f1:1d:c9:90:bd:c2:e7:fd:f1:6f:69:54: 2c:17:42:8d:f9:d7:6d:4f:4a:3b:52:81:f2:dc:7a:4b:3d:3b: 0c:79:5a:03:1b:80:d9:76:20:fd:76:eb:10:3e:f5:77:f3:df: 61:7e:0b:ac:fb:67:e4:a0:7d:c0:de:b5:42:ac:e8:e1:99:eb: e2:55:f4:18:2e:50:9b:58:6a:a4:d0:ce:55:59:29:f3:bb:00: df:07:92:b5:c2:91:dd:a4:66:cc:4a:bf:f3:4a:9e:ab:ec:e2: e9:cb:f5:5a:6a:e0:23:34:41:d1:04:27:0d:66:3e:02:6f:6d: a4:a1:7d:6c -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUDUzQHR6uZojuS38g5OqvpLif+pMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTcwN1oX DTI3MDMwMzA2MjIwN1owMzExMC8GA1UEAxMoNTAyNDM3MEI3MEE3MEZDQjY4Q0E2 MTIzQTg4MkJBRkEyNEIwN0MzQjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMSK3vdXsvhLvxWyTXQtlWeooWN3q6XN9vsRHhpf41/hun5pb+i+Uy8qzpgo bD8FPKV/cGJsIFIoNbB/j4LAq6al8vhhJ4k87O4ltkbBz5sTAH6Ni5DNOyCw3hAW f08rGpXPA2CBPnFnisC0qHyjX4Er6FOutv9x/+GG42hTGmhciTjTjYFRL/RnJJlh VDSQWG46AXfPZSRDYQSY7KrPWgHGqtOmewiVbcY5whTzsb4MDGXfVzjSKLX+QGrb B0OUM4u1tn6B4tQVywmsMs5ys6KMSPum1lHJa53D54xzH9+bKX2Katmy7EzXDFrC e7QEvV76/hmwRbRcIp7zCCYnUB0CAwEAAaOCAcUwggHBMB0GA1UdDgQWBBRQJDcL cKcPy2jKYSOogrr6JLB8OzAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NDYzMi5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK p74wDQYJKoZIhvcNAQELBQADggEBAAQc+iviS0vZBmRekhJSRwuGrlXmLI7HcfqO GzhAGF/9f500r+4Z0MwtwInb9nTqaFMDsZLN6WoHdIuwdoqiw4xxu/V68xrxZrKa ieJv1ZGMNWPn3KAGn6L3GDZMKZwlf9Nzo0o88AuYCkHmeM8anEaIFLK00I9d9D4t 2eE+PXJiHE7i4vEdyZC9wuf98W9pVCwXQo35121PSjtSgfLceks9Owx5WgMbgNl2 IP126xA+9Xfz32F+C6z7Z+SgfcDetUKs6OGZ6+JV9BguUJtYaqTQzlVZKfO7AN8H krXCkd2kZsxKv/NKnqvs4unL9Vpq4CM0QdEEJw1mPgJvbaShfWw= -----END CERTIFICATE-----Generated at Sat Mar 28 13:13:22 2026 by rpki-client